Lucene search
AtlassianCVELIST:CVE-2017-18083HistoryFeb 02, 2018 - 2:00 p.m.
CVE-2017-18083
2018-02-0214:00:00
atlassian
www.cve.org
4
EPSS
0.001
Percentile
28.6%
The editinword resource in Atlassian Confluence Server before version 6.4.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the contents of an uploaded file.
CNA Affected
[
{
"product": "Confluence",
"vendor": "Atlassian",
"versions": [
{
"status": "affected",
"version": "prior to 6.4.0"
}
]
}
]Related
cve
cve
CVE-2017-18083
2018-02-02 14:29:01
atlassian
atlassian
nvd
nvd
CVE-2017-18083
2018-02-02 14:29:01
prion
prion
Cross site scripting
2018-02-02 14:29:00